213302 - raise a false security error accessing to a secure page with a self-signed certificate and CA installed on browser

Status: VERIFIED DUPLICATE of bug 211790

(Core Graveyard :: Security: UI, defect)

Description

[Juan Zuriaga]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.4) Gecko/20030624
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.4) Gecko/20030624

Accesing to my self-signed secure corporate page raises 
an incorrectly error dialog advertising about an inexistent
domain name mismatch.

Causes:

Start Secure session to web site with certificate authority 
installed.

- Differents tested S.O.'s versions : 
    Windows XP Professional
    Linux xxxx.upv.es 2.4.18-3 #1 (Red Hat Linux 7.3)
    Windows 2000 Professional
- Mozilla Version : Release 1.4

- realised Steps: 
  1) begin browsing start page : http://www.upv.es/
  2) request the page in secure mode : https://www.upv.es/

  This steps raise the security error.

-----------------------------------------------------------------

Notes: 

The certificates has been tested with other security tools 
obviate the possiblity that it could be bad generated.

This error appeared with the new Mozilla release (1.4) and 
its byproducts (like Netscape 7.1)

This error not appears when you are trying to access to 
a secure site with a certificate signed with a builtin 
certificate authority.

For example:
http://www.amazon.com 
https://www.amazon.com 

The incorrectly reported error :

-----------------------------------------------------------------
security error: domain name mismatch

You have attempted to establish a connection with "www.upv.es".
However, the security certificate presented belongs to 
"www.upv.es". It is possible, though unlikely, that someone may 
be trying to intercept your communications with this web site.

If you suspect the certificate shown does not belong to 
"www.upv.es", please cancel the connection and notify the site 
administrator.

[View Certificate]

[OK] [Cancel] [Help]

-----------------------------------------------------------------

Thanks in advance.

Reproducible: Always

Steps to Reproduce:
1. start browser (load start page : http://www.upv.es)
2. request the same page under secure protocol (https://www.upv.es)
3.

Actual Results:  
Raise the incorrect dialog box :


-----------------------------------------------------------------
security error: domain name mismatch

You have attempted to establish a connection with "www.upv.es".
However, the security certificate presented belongs to 
"www.upv.es". It is possible, though unlikely, that someone may 
be trying to intercept your communications with this web site.

If you suspect the certificate shown does not belong to 
"www.upv.es", please cancel the connection and notify the site 
administrator.

[View Certificate]

[OK] [Cancel] [Help]

-----------------------------------------------------------------

Expected Results:  
If the common name agrees the requested hostname signed by its "installed"
certificate authority , mozilla must load without problems the requested page.

- Differents tested S.O.'s versions : 
    Windows XP Professional
    Linux xxxx.upv.es 2.4.18-3 #1 (Red Hat Linux 7.3)
    Windows 2000 Professional

- Mozilla Version : Release 1.4 and derivatives (like Netscape 7.1)

Comment 1

[Josh Birnbaum]

This looks similar to bug 211790.

Comment 2

[John Unruh]

*** This bug has been marked as a duplicate of 211790 ***

Comment 3

[John Unruh]

Verified.